[Remote] Azure Application Platform & DevSecOps Engineer
Note: The job is a remote job and is open to candidates in USA. Osborn & Holloway, LLC is seeking a senior Azure Application Platform & DevSecOps Engineer to design and build a governed internal application incubation platform within Microsoft Azure. The role focuses on automating infrastructure provisioning, security, identity, governance, CI/CD, lifecycle management, and platform guardrails so business users can safely create applications without managing enterprise engineering complexity manually.
Responsibilities
- Design the Azure architecture supporting the application incubation environment
- Develop approved deployment patterns for common categories of internally generated web applications
- Automate provisioning and configuration of Azure resources required by generated applications
- Establish appropriate patterns for Resource Groups, application hosting, storage, databases, APIs, identities, networking, monitoring, and supporting services
- Develop reusable infrastructure components using Infrastructure as Code
- Use Bicep, Terraform, or other approved technologies to make infrastructure provisioning repeatable and auditable
- Establish naming, tagging, ownership, lifecycle, and cost-management standards for generated resources
- Design secure authentication and authorization patterns using Microsoft Entra ID
- Automate appropriate use of managed identities, app registrations, service principals, and RBAC
- Establish automated Key Vault and secrets-management patterns
- Prevent generated applications from adopting unsafe credential, secret-storage, or access-control practices
- Incorporate Azure Policy and other governance mechanisms into the incubation environment
- Establish appropriate security scanning, package/dependency validation, and code-quality controls
- Collaborate with security and infrastructure stakeholders to define boundaries within which citizen-generated applications may operate
- Design technical controls that prevent generated applications from bypassing required governance
- Design automated source-control and CI/CD patterns for generated applications
- Integrate the platform with Azure DevOps repositories, work items, pipelines, and release processes
- Establish standardized DEV, test/UAT, and production deployment patterns
- Build automated quality, security, and approval gates into application promotion
- Ensure generated applications remain traceable, supportable, and recoverable
- Develop rollback, backup, monitoring, logging, and operational-support patterns
- Automate creation of appropriate deployment and operational documentation
- Establish lifecycle processes for application ownership transfer, retirement, and resource decommissioning
- Work with the AI Application Platform Engineer to translate enterprise engineering standards into automated platform rules
- Define which architectural decisions may safely be made automatically and which require human review
- Establish thresholds that determine when a self-service application must “graduate” into formal architecture, security, engineering, or governance review
- Consider factors including data sensitivity, regulatory implications, external exposure, integration complexity, transaction volume, business criticality, and user population
- Build mechanisms that prevent an application from progressing when required controls have not been satisfied
- Ensure the platform can explain why an application has been stopped, escalated, or routed for additional review
- Maintain sufficient full-stack development capability to understand and troubleshoot applications produced by the incubation platform
- Develop APIs and platform services required to connect AI orchestration, application generation, Azure provisioning, and DevOps automation
- Collaborate on reusable application components and architectural templates
- Support integrations with approved Microsoft enterprise services and business systems
- Participate directly in troubleshooting generated applications when failures span application, infrastructure, identity, security, or deployment boundaries
Skills
- Significant professional experience with Microsoft Azure architecture and engineering
- Strong understanding of Azure identity, security, networking, compute, storage, application hosting, and data services
- Hands-on experience with Microsoft Entra ID, RBAC, managed identities, app registrations, and enterprise authentication patterns
- Experience with Azure Key Vault and secure secrets-management practices
- Strong Infrastructure-as-Code experience using Bicep, Terraform, or comparable technologies
- Strong Azure DevOps experience, including repositories, pipelines, and application lifecycle management
- Practical experience designing CI/CD and DevSecOps processes
- Working full-stack development knowledge sufficient to understand modern web applications, APIs, databases, and application architecture
- Strong understanding of SDLC, environment management, testing, release management, and production-support principles
- Familiarity with Agile development methodologies
- Strong written and verbal English communication skills
- Ability to work independently while collaborating closely with another senior engineer across overlapping areas of responsibility
- Relevant Microsoft Azure certifications
- Experience with Azure OpenAI or AI-enabled application platforms
- Experience developing internal developer platforms, application factories, self-service provisioning systems, or Platform Engineering capabilities
- Experience with Azure Policy and enterprise cloud governance
- Experience with Microsoft Power Platform, Dataverse, Power Automate, or other low-code/no-code technologies
- Experience with application observability, Application Insights, Log Analytics, and automated operational monitoring
- Experience designing systems in regulated, healthcare, financial, or other security-conscious environments
- Experience with secure software supply-chain practices and automated vulnerability management
- Familiarity with FinOps and cloud cost-governance principles
Benefits
- Fully remote contract position
Company Overview